Privacy notice
Who is responsible for your data
Natural Resources Europe Limited, Bankside 300, Peachman Way, Broadland Business Park, Norwich NR7 0LB, England, is the controller of your personal data and is registered with the Information Commissioner's Office under registration number ZC300354. Contact: adrian.boodt@natreseur.com.
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Email address, optional first name | To create your account, send sign-in links and greet you | Contract |
| Course progress (lesson check results) and letter drafts | To save your work so you can return to it. Drafts can include details you type in, such as your address and the facts of your complaint | Contract |
| Purchase records (product, amount, date, Stripe reference, your consent to immediate access) | To give you access, handle refunds, and keep tax and accounting records | Contract; legal obligation |
| If you live outside the UK and ask to be told when we sell there: your email address and country | To email you once Write It Right is available in your country | Consent |
| Technical logs (IP address, browser) kept by our hosting provider | To keep the site secure and working | Legitimate interests |
Card details are collected by Stripe on its own payment page. We never see or store them.
Who we share it with
We use these providers to run the service. Each acts on our instructions under a data processing agreement:
- Supabase: accounts, progress and drafts. Data is stored in London, UK (eu-west-2).
- Netlify: website hosting.
- Stripe: payments. Stripe is also an independent controller for fraud prevention and its own legal obligations.
- Resend: sending sign-in emails.
Some of these providers are based in, or use sub-processors in, the United States. Where data leaves the UK or EEA, it's protected by the UK–US data bridge, adequacy decisions, or standard contractual clauses.
We don't sell your data, use advertising trackers, or send marketing emails unless you separately ask us to.
How long we keep it
Account data, progress and drafts: until you delete your account, or 2 years after your last sign-in. Purchase records: 6 years after the end of the tax year of purchase, as required for tax purposes. "Tell me when it's available" requests: until we've emailed you that it's available, you ask us to remove you, or 2 years, whichever is first.
Cookies and storage
We only use storage that's strictly necessary: your browser keeps your sign-in session and, before you create an account, your progress. We don't use analytics or advertising cookies, so we don't show a cookie banner. To see which countries our visitors come from, we count page visits per country per day; we work the country out from your connection when the page loads and store only the count, never your IP address or anything that identifies you.
Your rights
You can ask to see, correct, delete or receive a copy of your data, and object to or restrict how we use it. Email us and we'll respond within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk), or your local data protection authority if you're in the EU.